0

I have published an API on Bluemix. When I try to open the App URL on Safari or Chrome, it fails to establish a secure connection and gives the below error:

apiconnect-****.apic.mybluemix.net didn’t accept your login certificate, or one may not have been provided.

Anuj
  • 11

1 Answers1

0

You cannot launch your API directly as it is protected with mutual TLS certificates. You can only access/test the API via a client application with the proper credentials. This behavior is by design to protect/secure your APIs for unauthorized access. So here are the high level steps that happens when you publish your API to Bluemix:

1) Youcreate your API using the API Designer (i.e. by calling "apic edit" on your command line).

2) While working on the API Designer you can test your api locally by running it on the Micro Gateway. It runs the application locally and you run curl requests to test it (or even other tools like Postman)

3) You then publish your API to Bluemix

4) It is published with a mutual TLS certificate (for domain *.apic.mybluemix.net)

5) Client certificate is uploaded to the API Gateway (Data Power Gateway), so only when you call the API via the published end point it will work.

At this point to further test your API you have to subscribe to a plan in your developer portal, or if you are using a Sandbox catalog you can use the default Client ID and Client Secret provided in the Settings->Overview session of your API Manager.

Alex da Silva
  • 4,552
  • 2
  • 17
  • 25
  • Thanks Alex. Could you please further explain Step 5? What certificate needs to be uploaded and where? – Anuj May 25 '17 at 18:43
  • You don't have to update any certificate. APIc will upload the client certificate for you in the API Gateway so you can securely access the API. – Alex da Silva May 25 '17 at 19:15
  • Okay Alex. Then why am I not able to connect to the apic URL? Why does it ask for login certificate? Do I have to create an Identification Creds in some any client? If Yes, what cert/key should be configured there? – Anuj May 29 '17 at 23:37